// Improve performance and bug fixes

git-svn-id: http://dev.prestashop.com/svn/v1/branches/1.5.x@15882 b9a71923-0436-4b27-9f14-aed3839534dd
2012-06-06 16:22:48 +00:00
parent 9726f7dfa3
commit 2bce691ae8
32 changed files with 97 additions and 66 deletions
@@ -285,7 +285,8 @@ class AdminRequestSqlControllerCore extends AdminController
 	public function generateExport()
 	{
 		$id = Tools::getValue($this->identifier);
-
+		if (!Validate::isFileName($id))
+			die(Tools::displayError());
 		$file = 'request_sql_'.$id.'.csv';
 		if ($csv = fopen(_PS_ADMIN_DIR_.'/export/'.$file, 'w'))
 		{